Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
File:                     dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json)
Hash identifier:          BqVSc0MEV3bIoScO1BmJjE/dzx1XVXTkbSziDNr4L8I=
Subject key identifier:   A6:17:F1:07:34:56:76:9A:91:DE:6D:02:0F:C1:A6:AE:F1:9F:FA:37
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Certificate issuer:       /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial:       019CABD9CB35875209292A2E907504AC7885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
Manifest number:          184C
Signing time:             Mon 02 Mar 2026 00:01:43 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:43 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:43 +0000
Files and hashes:         1: J23raJoXXEduKZIZrRPiLi86VnA.roa (hash: v/0bTkNC6NTSIrnkHUjoMjqy5YU4u8PD1ywR+lNsXIw=)
                          2: M9XPPIauYu8vbc2Ub3NT2ITQt40.roa (hash: cI1UxjgAX2tnU9TBtap9O6a2kSTgffH3bwWkwVoWftk=)
                          3: QI0m8yxwMxD5ywSxfRkbyb2qPcE.roa (hash: 8djDX4kGY6Wd0AiK2DyOXGmoVTCo33Wju0Bfsfmfzlw=)
                          4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: +e6PusvVwn2DoDSB7NySJ72CmdwSbjD+PUNyiCOKvr0=)
                          5: nP3EGicDZfiR5ZgckruxBJyoECY.roa (hash: BB5Uj3DY8cxr4Rb47wF34MrssQh6rDw+XyqbJxAmiXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:cb:35:87:52:09:29:2a:2e:90:75:04:ac:78:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
        Validity
            Not Before: Mar  2 00:01:43 2026 GMT
            Not After : Mar  3 00:01:43 2026 GMT
        Subject: CN=a617f1073456769a91de6d020fc1a6aef19ffa37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:02:9a:fe:4c:22:54:c4:a4:50:e8:e4:16:
                    27:c3:b5:5b:a4:0f:c6:f2:f7:3c:81:bd:76:a4:7d:
                    d9:ff:30:26:ff:2f:68:72:d6:5e:b4:f4:bf:94:b0:
                    a9:39:db:39:ca:7f:09:6b:e4:ce:85:d9:9d:67:9a:
                    6d:a7:68:93:ec:d0:f7:1b:47:38:4a:86:ce:c4:fb:
                    78:bf:0e:e4:0d:61:24:89:57:5d:3e:cc:94:c7:35:
                    ae:5a:e2:49:3a:e0:87:bc:7f:84:84:fe:d7:b4:ac:
                    d3:a2:be:f3:3b:80:7b:4b:5b:53:97:de:d3:48:c1:
                    d5:88:6b:38:4d:1d:53:eb:2c:65:ec:80:a9:52:42:
                    ee:5d:b2:0f:9e:29:72:2f:e8:de:f0:07:85:2a:64:
                    c4:61:0e:9c:d4:08:e9:90:d2:25:fe:44:c1:3b:03:
                    d6:23:af:5a:85:94:13:21:e3:86:f7:eb:51:f3:f3:
                    8c:88:e2:42:43:41:c7:34:e4:ed:f7:12:39:2f:90:
                    50:ac:92:6e:bc:36:74:b7:55:eb:6a:28:fb:f4:40:
                    91:28:d9:e5:92:88:21:44:1e:3f:72:9a:d6:53:60:
                    71:95:1b:54:78:f6:ea:d8:6a:a9:58:01:49:71:9d:
                    1a:58:a9:50:e5:92:e1:61:88:a2:5e:4e:76:db:80:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:17:F1:07:34:56:76:9A:91:DE:6D:02:0F:C1:A6:AE:F1:9F:FA:37
            X509v3 Authority Key Identifier:
                keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f4:7a:cf:7b:ea:14:d6:15:84:f4:51:a7:04:b8:16:11:99:
         68:83:54:61:77:50:a9:18:b6:aa:7a:00:0f:e1:2f:0b:04:64:
         7f:1d:5f:de:3f:ec:87:86:8f:2b:b0:23:a6:2a:90:9c:09:36:
         4b:b9:c7:cf:87:87:fe:f0:e1:33:39:b6:07:d0:d0:c5:e2:f7:
         35:da:50:21:72:98:28:d3:93:01:82:13:fb:ce:52:19:19:e8:
         2f:28:20:2e:2a:8d:65:61:15:52:ad:0d:23:32:05:40:0d:a4:
         09:8f:7e:70:d1:1c:22:75:3f:66:8d:5b:7a:dd:31:81:f0:e0:
         0e:c2:f5:f3:65:cc:a0:61:b3:a4:13:82:0e:bc:9d:c2:f7:fc:
         90:bb:71:6f:dd:62:8e:29:c5:46:d8:fe:41:9f:bd:c4:5b:ae:
         db:49:d3:36:05:b8:b3:a1:c2:19:d1:42:05:fb:d7:c9:46:04:
         18:88:c9:51:c9:c2:9c:2f:fb:4f:cf:a6:04:58:96:d2:19:8c:
         01:0f:01:0c:b5:8d:33:28:32:ed:ff:81:9d:16:68:a8:92:f6:
         a1:fa:4c:84:c1:87:5a:16:23:e0:64:50:4e:ee:b9:fc:d3:6b:
         75:06:20:39:49:19:8e:74:1e:fd:7e:5a:5a:5c:80:fb:22:10:
         85:d7:bd:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cs1h1IJKSoukHUErHiFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj
MzQxNDYwHhcNMjYwMzAyMDAwMTQzWhcNMjYwMzAzMDAwMTQzWjAzMTEwLwYDVQQD
EyhhNjE3ZjEwNzM0NTY3NjlhOTFkZTZkMDIwZmMxYTZhZWYxOWZmYTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4QCmv5MIlTEpFDo5BYnw7VbpA/G
8vc8gb12pH3Z/zAm/y9octZetPS/lLCpOds5yn8Ja+TOhdmdZ5ptp2iT7ND3G0c4
SobOxPt4vw7kDWEkiVddPsyUxzWuWuJJOuCHvH+EhP7XtKzTor7zO4B7S1tTl97T
SMHViGs4TR1T6yxl7ICpUkLuXbIPnilyL+je8AeFKmTEYQ6c1AjpkNIl/kTBOwPW
I69ahZQTIeOG9+tR8/OMiOJCQ0HHNOTt9xI5L5BQrJJuvDZ0t1Xraij79ECRKNnl
koghRB4/cprWU2BxlRtUePbq2GqpWAFJcZ0aWKlQ5ZLhYYiiXk5224DvrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYX8Qc0Vnaakd5tAg/Bpq7xn/o3MB8GA1UdIwQY
MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt
NmNhMzQwZmE3NDkzLzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz
LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePR6z3vq
FNYVhPRRpwS4FhGZaINUYXdQqRi2qnoAD+EvCwRkfx1f3j/sh4aPK7AjpiqQnAk2
S7nHz4eH/vDhMzm2B9DQxeL3NdpQIXKYKNOTAYIT+85SGRnoLyggLiqNZWEVUq0N
IzIFQA2kCY9+cNEcInU/Zo1bet0xgfDgDsL182XMoGGzpBOCDrydwvf8kLtxb91i
jinFRtj+QZ+9xFuu20nTNgW4s6HCGdFCBfvXyUYEGIjJUcnCnC/7T8+mBFiW0hmM
AQ8BDLWNMygy7f+BnRZoqJL2ofpMhMGHWhYj4GRQTu65/NNrdQYgOUkZjnQe/X5a
WlyA+yIQhde9SA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:47 2026 by rpki-client